ThinAir Data MCP Server

The only MCP database server for PostgreSQL, MySQL, and SQL Server in one session — 26 tools across 4 tiers — schema introspection, cross-database compare, query firewall, PII scanning, N+1 detection, and runtime connection management. Read-only data access by design.

26 tools · PostgreSQL · MySQL · SQL Server · Read-only data access, schema discovery, profiling, SQL safety, anomaly detection

> describe_schema("fleet")
✓ 42 tables discovered · 6 high-value entities
✓ no write permissions enabled
> ask("Which vehicles had the most idle time last week?")
✓ generated safe read-only SQL · returned 10 rows · flagged 3 exceptions

Part of ThinAir

ThinAir Data is part of the ThinAir platform for fleet visibility, analytics, operational search, reporting, and AI-assisted decision support.

Related MCP server: ThinAir Geo

Hosted product vs this repository

• data.thinair.co is the hosted ThinAir product.

• This repository is the thin public MCP package/pointer for developers and AI-agent clients.

• Production use may require a ThinAir account, API key, OAuth connection, or hosted workspace.

What It Does

ThinAir Data is a Model Context Protocol (MCP) server that gives AI agents secure, read-only access to your databases — no custom backend required. Designed for read-only production access when configured correctly. ThinAir Data enforces read-only behavior through SQL guards, database-session read-only mode where supported, and optional per-connection firewall rules. You should still use least-privilege database credentials and avoid exposing sensitive tables unless required.

• Multi-database — PostgreSQL, MySQL, SQL Server in a single session. Cross-database compare with one tool call.

• Read-only by design — SQL guards, database-session read-only mode where supported, and optional per-connection firewall rules.

• Dialect-aware — every tool understands SELECT TOP 10 (mssql) vs LIMIT (others) and routes syntax correctly per connection.

• Tiered capability — 26 tools across 4 tiers: schema introspection, query execution + history, EXPLAIN/optimization, anomaly detection, PII scanning, N+1 detection, query firewall, cross-DB compare, and runtime connection management (add/remove).

• Connections are managed at runtime — added per-tenant via the add_connection tool after sign-in. Never an env var or install-time config.

Product Links

• Product: https://data.thinair.co

• Connect a database: https://data.thinair.co/connect

• Docs: https://data.thinair.co/docs/getting-started

• Pricing: https://data.thinair.co/checkout

• ThinAir: https://thinair.co

Agent Discovery

Autonomous agents and directory crawlers can discover this server's capabilities without parsing this README. All three surfaces are live and served by the hosted product:

The MCP endpoint itself is https://data.thinair.co/mcp (streamable-http; OAuth 2.1 keyless, or Authorization: Bearer).

Tools (selected — full list of 26 in docs)

add_connection, remove_connection, optimize_query, explain_query, suggest_queries, generate_migration, generate_seed_data, watch_table, saved_queries, impact_analysis, configure_allowlist, and others round out the 26-tool surface.

Quick Start

Claude Desktop, Cursor, Windsurf — OAuth (recommended, keyless)

Add to your client's MCP config (e.g. ~/Library/Application Support/Claude/claude_desktop_config.json):

{
  "mcpServers": {
    "thinair-data": {
      "url": "https://data.thinair.co/mcp"
    }
  }
}

The OAuth flow completes at first use — no manual token setup required. After sign-in, your agent calls add_connection to register a database with its DSN — connections are tenant-scoped and reusable across sessions.

API key (for non-OAuth clients)

{
  "mcpServers": {
    "thinair-data": {
      "url": "https://data.thinair.co/mcp",
      "headers": {
        "Authorization": "Bearer ta_live_..."
      }
    }
  }
}

Get a key at https://data.thinair.co/connect.

npx (CLI / scripts)

npx -y @thinairtelematics/data

Prints a config block to stdout. OAuth-keyless by default.

Supported Databases

Database connections are added at runtime via the add_connection MCP tool — pass the DSN once, the connection becomes a named resource the agent can reuse across sessions. Three dialects supported:

You do not put a DSN in your client's config. The add_connection tool is how connections enter the session.

Example Usage

Once connected, ask your AI:

• "Show me all rows that haven’t updated in the last 24 hours across staging and prod"

• "What are the top 10 slowest queries this week?"

• "Scan the customers table for PII patterns"

• "Which tables have the most N+1 query exposure?"

Not for secrets

Do not commit DSNs, passwords, tokens, private keys, or production credentials. Use OAuth, the hosted connection flow, or your MCP client's secret storage.

npm Package

npmjs.com/package/@thinairtelematics/data

Previously published as thinair-data (now deprecated in favor of the scoped package).

License

MIT © ThinAir Telematics